GeoNode has Unrestricted File Upload

The upload service validation can be circumvented with specially crafted requests, allowing for the storage and serving of malicious files...